diff --git a/doc/ChangeLog b/doc/ChangeLog
index 860921e1a..49a4f4597 100644
--- a/doc/ChangeLog
+++ b/doc/ChangeLog
@@ -43,11 +43,12 @@ sqlmap (0.9-1) stable; urgency=low
* Added --text-only switch to strip from the HTTP response body the
HTML/JS code and compare pages based only on their textual content
(Miroslav).
+ * Implemented few other features and switches (Bernardo and Miroslav).
* Over 100 bugs fixed (Bernardo and Miroslav).
* Major code refactoring (Bernardo and Miroslav).
* User's manual updated (Bernardo).
- -- Bernardo Damele A. G.
by
Bernardo Damele A. G.,
-Miroslav Stampar
version 0.9, April XX, 2011
+Miroslav Stamparversion 0.9, April 10, 2011
This document is the user's manual to use
sqlmap.
@@ -561,7 +561,7 @@ the
-
Switch: --predict-output
TODO
+This switch is used in inference algorithm for sequential statistical
+prediction of characters of value being retrieved. Based on items given in
+txt/common-outputs.txt together with the knowledge of current
+enumeration used statistical table with the most promising values is being
+built. In case that the value can be found among the common output values,
+as the process progresses, subsequent character tables are being narrowed
+more and more. If used in combination with retrieval of common DBMS
+entities, as with system table names and privileges, speed up is
+significant. Of course, you can edit the common outputs file according to
+your needs if, for instance, you notice common patterns in database table
+names or similar.
Note that this switch is not compatible with --threads
+switch.
Switch: --keep-alive
This switch instructs sqlmap to use persistent HTTP(s) connections.
-Note that this switch is incompatible with --proxy switch.
This switch instructs sqlmap to use persistent HTTP(s) connections.
+ +Note that this switch is incompatible with --proxy
+switch.
Switch: --null-connection
TODO
-Note that this switch is incompatible with --text-only
+
There are special HTTP request types which can be used to retrieve
+HTTP response's size without getting the HTTP body. This knowledge can be
+used in blind injection technique to distinguish True from
+False responses. When this switch is provided, sqlmap will try to
+test and exploit two different NULL connection techniques:
+Range and HEAD.
+If any of these is supported by the target web server, speed up will come
+from the obvious saving of used bandwidth.
These techniques are detailed in the white paper +Bursting Performances in Blind SQL Injection - Take 2 (Bandwidth).
+ +Note that this switch is incompatible with --text-only
switch.
Note that this switch is not compatible with
+--predict-output switch.
TODO: --text-only
+In cases with lot of active (e.g. scripts, embeds, etc.) content in the
+HTTP responses' body, you can filter pages (--text-only
+switch) just for their textual content. This way, in a good number of
+cases, you can automatically tune the detection engine.
information_schema is not available.MSysObjects is not readable - default setting.information_schema is not available.
100% [===================================================] 64/64
-[10:28:53] [INFO] retrieved: Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Prod
+[hh:mm:53] [INFO] retrieved: Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Prod
web application technology: PHP 5.2.6, Apache 2.2.9
back-end DBMS: Oracle
diff --git a/doc/README.pdf b/doc/README.pdf
index 3e4c34f2f..6b1d90096 100644
--- a/doc/README.pdf
+++ b/doc/README.pdf
@@ -712,15 +712,14 @@ endobj
<< /S /GoTo /D [474 0 R /Fit ] >>
endobj
507 0 obj <<
-/Length 1251
+/Length 1243
/Filter /FlateDecode
>>
stream
-xZKs6WVp&d"H:vIVq{%XfÇi --qm E߷]px
-}p/;!
bgirfşs
-l$LM{[yfܧ_Y)wq1ggs.We!JiL<
\&~ܣ C=pjYhx,URwj*2ڿԕ0b\fa